Privacy Policy

This Privacy Policy describes how Chopt ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at chopteat.click, use our online food ordering services, or otherwise interact with us. Please read this policy carefully. By using our website or services, you agree to the practices described in this Privacy Policy.

We are committed to protecting your privacy and handling your personal data with transparency, integrity, and care. This policy applies to all users of our website and digital services, including customers who browse our menu, place orders, create accounts, or contact us for support.

1. About Us

Chopt is a food service company operating through the website chopteat.click. We provide online food ordering, delivery coordination, and related digital services to customers across the United States.

2. Information We Collect

We collect several types of information from and about users of our website and services. This information falls into the following categories:

2.1 Personal Information You Provide to Us

When you interact with our services, you may voluntarily provide us with personally identifiable information, including but not limited to:

• Contact Information: Your full name, email address, phone number, and mailing or delivery address.
• Account Credentials: Username, password, and security questions when you register for an account.
• Payment Information: Credit card numbers, debit card details, billing address, and other financial information necessary to process transactions. Note that full payment card details are processed by our secure third-party payment processors and are not stored on our servers.
• Order Information: Details about the food items you order, customization preferences, dietary restrictions or allergen information you provide, order history, and delivery instructions.
• Communications: Messages, feedback, reviews, complaints, or inquiries you send to us via email, contact forms, or customer support channels.
• Promotional Preferences: Your preferences regarding receiving marketing communications and promotions from us.

2.2 Information Collected Automatically

When you visit our website or use our digital services, we automatically collect certain information about your device and browsing activity, including:

• Device Information: IP address, browser type and version, operating system, device identifiers, and hardware configuration.
• Usage Data: Pages visited, time spent on each page, links clicked, search queries entered, menu items viewed, and navigation patterns within our website.
• Log Data: Server logs that record access times, referring URLs, error reports, and other technical information generated by your interaction with our website.
• Location Information: General geographic location derived from your IP address. If you grant permission, we may also collect more precise GPS-based location data to facilitate delivery services.
• Cookie and Tracking Data: Information collected through cookies, web beacons, pixels, and similar tracking technologies. Please refer to Section 8 of this Privacy Policy for more details.

2.3 Information from Third Parties

We may receive information about you from third-party sources, such as:

• Social media platforms if you connect your account or interact with our social media pages.
• Analytics providers that help us understand how users engage with our website.
• Delivery partners, fulfillment services, or other business partners involved in processing and delivering your orders.
• Fraud prevention and identity verification services.

3. How We Use Your Information

We use the information we collect for a variety of purposes related to providing, improving, and promoting our food services. Specifically, we use your information for the following purposes:

3.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders, including communicating order status and delivery updates.
• Creating and managing your user account.
• Processing payments and preventing fraudulent transactions.
• Coordinating delivery logistics and communicating with delivery personnel.
• Responding to your customer service requests, questions, and complaints.
• Sending transactional communications such as order confirmations, receipts, and refund notifications.

3.2 Website Improvement and Analytics

• Analyzing how users interact with our website to improve usability, navigation, and overall user experience.
• Monitoring website performance, identifying technical errors, and troubleshooting issues.
• Conducting internal research and data analysis to understand customer behavior and preferences.
• Developing new features, menu offerings, and service enhancements based on user feedback and behavior patterns.

3.3 Marketing and Promotional Communications

• Sending you promotional emails, newsletters, special offers, and information about new menu items, provided you have opted in or we have a legitimate interest in doing so.
• Personalizing your experience on our website by displaying relevant menu recommendations and promotional content based on your order history and preferences.
• Running targeted advertising campaigns on third-party platforms, where permitted by law and your consent settings.
• Conducting surveys, contests, and loyalty programs.

3.4 Legal and Compliance Purposes

• Complying with applicable federal and state laws, regulations, and legal obligations.
• Enforcing our Terms of Service and other agreements.
• Protecting the rights, property, and safety of Chopt, our customers, and the public.
• Responding to lawful requests from government authorities, law enforcement agencies, or courts.
• Detecting, investigating, and preventing fraudulent activity, security breaches, and other prohibited conduct.

4. Legal Basis for Processing

As a company operating in the United States, we process your personal information based on the following legal grounds, consistent with applicable federal and state privacy laws including the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and the Federal Trade Commission Act (FTC Act):

• Contractual Necessity: Processing necessary to fulfill your orders, manage your account, and provide the services you request.
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services, preventing fraud, and conducting marketing activities, provided these interests are not overridden by your rights.
• Legal Obligation: Processing required to comply with applicable laws and regulations.
• Consent: Where you have provided explicit consent, such as for receiving marketing communications or enabling certain cookies.

5. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for monetary compensation. However, we may share your information with certain third parties in the following circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party service providers who assist us in operating our website and delivering our services. These parties are contractually obligated to use your information only for the purposes we specify and to maintain appropriate security measures. Service providers may include:

• Payment processors and financial institutions for transaction processing.
• Delivery and logistics partners for order fulfillment.
• Cloud hosting and data storage providers.
• Email marketing and communication platforms.
• Website analytics and performance monitoring tools.
• Customer relationship management (CRM) systems.
• Fraud detection and security service providers.

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law, court order, or legal process, or if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation under federal or state law.
• Respond to lawful requests from public authorities, including national security or law enforcement agencies.
• Protect and defend the rights or property of Chopt.
• Prevent or investigate possible wrongdoing in connection with our services.
• Protect the personal safety of users or the public.

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of that business transaction. We will provide notice before your personal information becomes subject to a different privacy policy.

5.4 Aggregated or De-Identified Data

We may share aggregated, anonymized, or de-identified information — which cannot reasonably be used to identify you — with third parties for research, marketing, analytics, and other purposes.

6. Data Security

Protecting your personal information is a priority for us. We implement a range of technical, administrative, and physical security measures designed to protect your information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption: We use industry-standard Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our servers.
• Access Controls: We restrict access to your personal information to employees, contractors, and agents who need to know that information to operate, develop, or improve our services, and who are subject to confidentiality obligations.
• Payment Security: Payment card data is handled by PCI DSS-compliant payment processors. We do not store full credit card numbers on our systems.
• Regular Security Audits: We regularly review our information collection, storage, and processing practices to guard against unauthorized access.
• Incident Response: We maintain procedures to detect, respond to, and notify you of data security incidents in accordance with applicable state breach notification laws.

7. Your Privacy Rights

Depending on your state of residence, you may have certain rights regarding your personal information under applicable U.S. privacy laws. We respect and honor these rights as described below:

7.1 Rights for California Residents (CCPA/CPRA)

If you are a resident of California, you have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the sources from which it was collected, the business purposes for which it is used, and the categories of third parties with whom it is shared.
• Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions permitted by law.
• Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising purposes. To exercise this right, please contact us at [email protected].
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use and disclosure of sensitive personal information to purposes necessary for providing our services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge different prices, provide a different quality of service, or suggest you will receive a different level of service for exercising your rights.

7.2 General Privacy Rights for All U.S. Residents

Regardless of your state of residence, we provide all users with the following rights and options:

• Right to Access: You may request a copy of the personal information we hold about you by contacting us at [email protected].
• Right to Correction: You may update or correct your personal information by logging into your account or contacting us directly.
• Right to Deletion: You may request deletion of your account and associated personal information, subject to our legal obligations to retain certain data.
• Right to Data Portability: Upon request, we will provide you with a copy of your personal information in a structured, commonly used, and machine-readable format.
• Right to Opt-Out of Marketing: You may opt out of receiving marketing communications from us at any time by clicking the "unsubscribe" link in any marketing email or by contacting us at [email protected].

7.3 How to Submit a Privacy Request

To exercise any of your privacy rights, you may submit a verifiable consumer request to us by:

• Emailing us at: [email protected]
• Visiting our website: chopteat.click

We will respond to verifiable consumer requests within 45 days of receipt. If we require more time, we will notify you of the extension and the reason for the delay. We may need to verify your identity before processing your request. We will not charge a fee for processing your request unless it is excessive or repetitive.

8. Cookie Policy

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and support our marketing efforts.

8.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites function properly, improve efficiency, and provide information to website operators.

8.2 Types of Cookies We Use

8.3 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. Please note that disabling certain cookies may affect the functionality of our website and your ability to place orders. For more information about cookies and how to manage them, please visit www.allaboutcookies.org.

9. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Our general data retention guidelines are as follows:

When personal information is no longer needed for the purposes for which it was collected, we will securely delete, anonymize, or de-identify it in accordance with our data retention procedures.

10. Children's Privacy

We do not knowingly collect, solicit, or use personal information from children under the age of 18. Our website is not directed at children, and we do not intentionally market our services to minors. If you are under the age of 18, please do not use our website or provide us with any personal information.

If we become aware that we have inadvertently collected personal information from a child under the age of 18, we will take immediate steps to delete such information from our records. If you are a parent or guardian and believe that your child under 18 has provided us with personal information without your consent, please contact us immediately at [email protected].

We comply with the Children's Online Privacy Protection Act (COPPA) and take our obligations under this federal law seriously.

11. International Data Transfers

Chopt is based in the United States, and the information we collect is governed by United States law. If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located and our central database is operated.

The data protection and privacy laws in the United States may differ from the laws of your country. By using our website and services and providing us with your personal information, you acknowledge and consent to the transfer of your information to the United States and the processing of your information in accordance with this Privacy Policy and applicable U.S. laws.

We take steps to ensure that any international transfers of personal data are conducted in compliance with applicable laws and with appropriate safeguards in place to protect your privacy rights.

12. Third-Party Websites and Links

Our website may contain links to third-party websites, applications, or services that are not owned or controlled by Chopt. We have no control over and assume no responsibility for the privacy practices, content, or policies of any third-party websites. We encourage you to review the privacy policies of any third-party websites you visit.

The inclusion of any link to a third-party website on our website does not imply our endorsement, recommendation, or approval of that website or its content. Your interactions with third-party websites are governed solely by their terms and privacy policies.

13. Do Not Track Signals

Some web browsers offer a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activities tracked. Our website does not currently respond to DNT signals, as there is no universally accepted standard for how websites should respond to such signals. However, you can manage your tracking preferences through our cookie settings and by adjusting your browser settings as described in Section 8 of this policy.

14. Federal Trade Commission Act Compliance

We are committed to operating our business in compliance with the Federal Trade Commission Act (FTC Act), which prohibits unfair or deceptive acts or practices in commerce. Our privacy practices are designed to be transparent, fair, and consistent with the representations we make in this Privacy Policy. We will not engage in deceptive data practices, and we will not use your information in ways that are materially inconsistent with what we have described to you at the time of collection.

If you believe we have engaged in any unfair or deceptive practices regarding your personal information, you have the right to file a complaint with the Federal Trade Commission at www.ftc.gov.

15. How to File a Complaint

If you believe your privacy rights have been violated or that we have not handled your personal information in accordance with this Privacy Policy or applicable law, we encourage you to contact us first so that we can attempt to resolve your concern directly.

You may contact our privacy team at:

• Email: [email protected]
• Website: chopteat.click

If you are not satisfied with our response, or if you believe we are processing your personal information in violation of applicable law, you have the right to file a complaint with the appropriate regulatory authority:

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or for other operational, legal, or regulatory reasons. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this Privacy Policy.
• Post the revised policy on our website at chopteat.click.
• Send you an email notification if you have an account with us and the changes are material.

Your continued use of our website or services after the posting of a revised Privacy Policy constitutes your acceptance of and agreement to the revised policy. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact our privacy team. We are committed to addressing your inquiries promptly and thoroughly.